KCSAN: data-race in ____sys_sendmsg / fasync_insert_entry (5)

Status: moderation: reported on 2026/08/14 21:35
Subsystems: fs
Labels: race:benign prio:low
[Documentation on labels]
Reported-by: syzbot+d56390baaf94bccb2fc6@syzkaller.appspotmail.com
First crash: 3d20h, last: 3d20h
✨ AI Jobs (2)
ID Workflow Result Correct Bug Created Started Finished Revision
a0aaa29d assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ✅ UserNamespace: ✅ VMGuestTrigger: ❌ VMHostTrigger: ❌ KCSAN: data-race in ____sys_sendmsg / fasync_insert_entry (5) 2026/08/16 01:08 2026/08/16 01:08 2026/08/16 01:51 746171ee
b0e108e8 assessment-kcsan Benign: ✅ KCSAN: data-race in ____sys_sendmsg / fasync_insert_entry (5) 2026/08/14 21:34 2026/08/14 21:34 2026/08/14 22:07 746171ee
Similar bugs (4)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in ____sys_sendmsg / fasync_insert_entry (2) fs 6 1 2210d 2210d 0/29 auto-closed as invalid on 2020/09/03 03:37
upstream KCSAN: data-race in ____sys_sendmsg / fasync_insert_entry (3) fs 6 1 1922d 1922d 0/29 auto-closed as invalid on 2021/06/18 13:34
upstream KCSAN: data-race in ____sys_sendmsg / fasync_insert_entry (4) fs 6 1 1218d 1218d 0/29 auto-obsoleted due to no activity on 2023/05/23 09:14
upstream KCSAN: data-race in ____sys_sendmsg / fasync_insert_entry fs 6 1 2262d 2262d 0/29 closed as invalid on 2020/06/18 14:13

Sample crash report:
==================================================================
BUG: KCSAN: data-race in ____sys_sendmsg / fasync_insert_entry

read-write to 0xffff88810f3a6da8 of 4 bytes by task 27752 on cpu 1:
 fasync_insert_entry+0x120/0x150 fs/fcntl.c:1071
 fasync_add_entry fs/fcntl.c:1098 [inline]
 fasync_helper+0x5e/0xc0 fs/fcntl.c:1116
 sock_fasync+0x58/0xc0 net/socket.c:1526
 setfl fs/fcntl.c:76 [inline]
 do_fcntl+0xd5e/0xf80 fs/fcntl.c:477
 __do_sys_fcntl fs/fcntl.c:602 [inline]
 __se_sys_fcntl+0xb1/0x120 fs/fcntl.c:587
 __x64_sys_fcntl+0x43/0x50 fs/fcntl.c:587
 x64_sys_call+0x2844/0x3020 arch/x86/include/generated/asm/syscalls_64.h:73
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88810f3a6da8 of 4 bytes by task 27744 on cpu 0:
 ____sys_sendmsg+0x247/0x580 net/socket.c:2669
 ___sys_sendmsg+0x195/0x1e0 net/socket.c:2738
 __sys_sendmmsg+0x185/0x320 net/socket.c:2827
 __do_sys_sendmmsg net/socket.c:2854 [inline]
 __se_sys_sendmmsg net/socket.c:2851 [inline]
 __x64_sys_sendmmsg+0x57/0x70 net/socket.c:2851
 x64_sys_call+0x27aa/0x3020 arch/x86/include/generated/asm/syscalls_64.h:308
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x136/0x3c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000002 -> 0x00042002

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 UID: 0 PID: 27744 Comm: syz.7.7588 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/14 21:34 upstream ad8d485e6658 6f9b3e89 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in ____sys_sendmsg / fasync_insert_entry
* Struck through repros no longer work on HEAD.